Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-3252. PoCs published by Affix.
AI-analyzed exploit summary The exploit demonstrates SQL injection vulnerabilities in Rock Band CMS by injecting UNION-based SQL queries into the 'year' and 'id' parameters of the news.php page. It allows an attacker to access or modify data in the underlying database.
Description
Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters.
Exploits (2)
The exploit demonstrates SQL injection vulnerabilities in Rock Band CMS by injecting UNION-based SQL queries into the 'year' and 'id' parameters of the news.php page. It allows an attacker to access or modify data in the underlying database.
This is a writeup detailing SQL injection vulnerabilities in BandCMS v0.10's news.php file. It provides exploit examples and suggests patches but does not include executable exploit code.